CVE-2020-35262

CVE-2020-35262: Stored XSS in Digisol DG-HR3400 Router Vulnerability Description It has been identified that the vulnerable endpoint doesn't have server side input validation and lacks client side filtering for any malicious script injection. An attacker can use this vulnerability to inject...

ntpdos

ntpdos PoC for distributed NTP reflection DoS CVE-2013-5211. Usage $ ./ntpdos -H --== ntpdos by sepehrdad ==-- usage: ntpdos -t -s options | misc options: -t - target ip address -T - list of target ip addresses -s - ntp server ip address -S - list of ntp server ip addresses -p - number of paralle...

fraud-bridge

Intro fraud-bridge helps bypassing restrictive censorship environments that block direct TCP or UDP connections, by setting up ICMP, NTP or DNS over IPv4 or IPv6 tunnels. It automatically patches TCP MSS option to achieve a non-fragmented stream of packets known as MSS-clamping to gain performanc...

opnsense-ntp-gps-fudge

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · opnsense-ntp-gps-fudge opnsense-ntp-gps-fudge Class: Config line injection Reach: Remote OPNsense core 26.7.6 a842fe48 - opnsense.org Leftover of GHSA-fq94. GPS/PPS fudge1 / fudge2 / refid still concatenate into...

pybatfish

Got questions, feedback, or feature requests? Join our community onSlack! Pybatfish Pybatfish is a Python client for Batfish. What is Batfish? Batfish is a network validation tool that provides correctness guarantees for security, reliability, and compliance by analyzing the configuration of...

owt

Currently unstable will be updated eventually. Offensive Wifi Toolkit owt created by Brennan Mccown clu3bot This tool compiles some necessary tools for wifi auditing in a unix bash script with a user friendly interface. The goal of owt is to have the smallest file size possible while still...

WireBug

WireBug WireBug is a tool set for Voice-over-IP penetration testing. It is designed as a wizard which makes it easy to use. The tools are build for single using too, so every tool is its own python or bash program. Installation Read the Installation Guide in the wiki. Tools FullBridge: This is a...

ntpscanner

ntpscanner NTP monlist scanner CVE-2013-5211 This code is for educational and research purposes, do not use it for malicious purposes...

CVE-2020-25498

CVE-2020-25498: Stored XSS via CSRF in Beetel 777VR1 Router Vulnerability Description It has been identified that the vulnerable endpoint doesn't have server side input validation and lacks client side filtering for any malicious script injection. An attacker can use this vulnerability to inject...

NTPUpdateSnowLeopard

This repository does not have a README...

ntpscanner

ntpscanner Scans NTP servers for CVE-2013-5211 NTP DDOS amplification vulnerability...

Sandman

Sandman Sandman is a backdoor that is meant to work on hardened networks during red team engagements. Sandman works as a stager and leverages NTP a protocol to sync time & date to get and run an arbitrary shellcode from a pre-defined server. Since NTP is a protocol that is overlooked by many...

NTP_Trojan

NTPTrojan About Reverse ntp remote access trojan in python, for penetration testers. For more information about roadmap and inspiration see: http://lockboxx.blogspot.com/2015/04/python-ntp-trojan.html References Server is heavily derived from: https://github.com/limifly/ntpserver...

CVE-2026-22007-NTP-monlist-Amplification-over-IPv6

CVE-2026-22007 – NTP monlist Amplification over IPv6 Program Code Python ntpamplifysim.py - NTP server responding to monlist without authentication import socket, struct def ntpmonlistresponse: Simplified NTP reply with many entries return b'\x00' 1200 large response server =...

CVE-2016-3962-Exploit

CVE-2016-3962, CVE-2016-3989 POC Exploit This is a proof of concept exploit for version V5.30p of the web configuration interface for Meinberg NTP Time Server. This exploit also utilitizes CVE-2016-3989 to escalate to the root user. More details about the vulnerabilities can be found at:...

NTP_CVE-2013-5211

NTPCVE-2013-5211 Exploit and check CVE-2013-5211...

CVE-2026-110825

A flaw was found in Kiloview E3. The device's Open Network Video Interface Forum ONVIF service accepts network and time configuration write operations without enforcing authentication. A remote, unauthenticated attacker can exploit this flaw to alter the device hostname, redirect Domain Name Syst...

CVE-2026-110825 Kiloview E3 NDI Encoder Missing Authentication for Critical Function

The ONVIF device service on affected Kiloview E3 NDI encoder firmware accepts hostname, DNS, and NTP configuration write operations without requiring authentication, regardless of the device's configured authentication setting for this service. A remote, unauthenticated attacker can alter the...

CVE-2026-110825

The Kiloview E3 NDI encoder is affected by a vulnerability where the ONVIF device service fails to require authentication for critical configuration write operations. An unauthenticated remote attacker can modify the hostname , DNS resolution , or NTP configuration . This allows for follow-on att...

Security Bulletin: AIX is vulnerable to a denial of service due to NTP and tmux.

Summary Multiple vulnerabilities in NTP and tmux could allow a remote attacker to cause Integer Overflow CVE-2026-63384, Out-of-bounds Read CVE-2026-63383, Memory Corruption CVE-2026-63381, CVE-2026-63387, CVE-2026-63388, HTTP Request Smuggling / Header Injection CVE-2026-63379, CVE-2026-63382,...